Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/iFGAeCOQWKdWD3SIvEs6yuEuBo0.roa
File: iFGAeCOQWKdWD3SIvEs6yuEuBo0.roa (raw, json)
Hash identifier: chLAzzxQdfBvdNrNkodJ1ljz+G31F3Z6AVA2+Zs30Xw=
Subject key identifier: 88:51:80:78:23:90:58:A7:56:0F:74:88:BC:4B:3A:CA:E1:2E:06:8D
Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial: 0198CC6762E884FD6FB3878B1E3BFB21C67A
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/iFGAeCOQWKdWD3SIvEs6yuEuBo0.roa
Signing time: Thu 21 Aug 2025 11:33:04 +0000
ROA not before: Thu 21 Aug 2025 11:33:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 984
IP address blocks: 212.11.16.0/23 maxlen: 24
212.11.20.0/22 maxlen: 24
212.11.24.0/23 maxlen: 24
212.11.32.0/21 maxlen: 24
212.11.42.0/23 maxlen: 24
212.11.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cc:67:62:e8:84:fd:6f:b3:87:8b:1e:3b:fb:21:c6:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Validity
Not Before: Aug 21 11:33:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88518078239058a7560f7488bc4b3acae12e068d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:09:e4:56:ce:5c:ed:fd:d2:ce:67:51:20:a4:
89:8b:a5:9d:62:c3:b8:4c:f4:b5:59:c3:ec:3c:4f:
23:81:ab:69:51:e1:28:fc:72:d8:fa:a4:00:fc:08:
46:93:fd:f6:42:ca:68:bd:76:55:d3:7a:fe:11:86:
d0:ac:dd:ea:46:bb:9b:00:71:25:dd:ba:fc:a2:e4:
fa:73:fe:54:50:67:70:d4:40:ef:1b:c1:d2:f8:4b:
29:d2:31:ff:0d:e5:97:09:23:2b:6e:55:e1:de:07:
89:42:7c:a4:a5:e2:fa:31:d9:26:e4:14:49:08:7f:
72:e1:a9:6e:22:f6:fb:f4:11:e9:ee:d8:f3:1a:18:
58:2b:30:b6:d2:cf:33:e9:db:16:37:1b:e0:98:e2:
64:b7:e2:7c:81:39:ac:60:9c:fc:3e:22:48:00:f3:
f7:bc:59:d3:8f:7f:6f:9e:05:02:5a:82:9e:1d:bc:
59:d7:fb:43:19:8c:0c:32:40:9d:c2:53:48:bb:66:
02:89:60:ee:c7:b8:91:1c:cc:f4:c6:2b:32:a1:b2:
e7:4b:c0:66:76:89:f1:fa:f0:46:bb:da:f5:7c:04:
fa:29:02:ce:dc:04:3c:1d:eb:ee:c4:37:b1:09:bd:
bb:21:55:b3:d2:70:57:ca:8b:4e:ac:15:56:c6:df:
54:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:51:80:78:23:90:58:A7:56:0F:74:88:BC:4B:3A:CA:E1:2E:06:8D
X509v3 Authority Key Identifier:
keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/iFGAeCOQWKdWD3SIvEs6yuEuBo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.11.16.0/23
212.11.20.0-212.11.25.255
212.11.32.0/21
212.11.42.0/23
212.11.60.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:de:94:01:f0:51:1b:4a:69:b5:80:5f:f7:40:97:31:a6:57:
b0:35:af:f6:ba:cf:b7:ba:67:42:fa:38:1f:f7:7a:69:17:64:
a2:92:62:21:c4:72:75:16:18:c5:b4:aa:be:d6:77:b7:c3:ca:
75:47:e0:7c:93:94:c6:a8:92:44:3c:fa:9e:2c:5b:a8:41:46:
3f:05:7f:85:1c:30:03:85:78:e4:a1:b1:88:40:fc:e4:80:8b:
ec:cd:ab:e8:e8:49:49:16:86:2b:50:8a:49:d7:9a:73:e7:7e:
5e:df:2f:12:2d:85:d8:ec:2c:b5:c5:c8:28:c9:ef:2f:8a:b2:
e4:36:aa:55:d9:c8:6c:f6:d5:93:25:0a:0b:6e:4a:d5:6b:d3:
73:8b:86:6b:28:52:32:e4:75:77:07:3e:a5:9c:dc:ce:39:a3:
cc:3c:a5:0d:9b:05:ae:f3:ee:6e:aa:4d:91:3e:41:45:36:d5:
b9:02:fe:41:25:10:20:b5:15:0f:9b:ec:cb:bb:96:33:b7:98:
da:ba:df:7e:59:aa:a9:b1:3f:ad:d0:78:bf:80:e1:79:b3:2f:
e9:1e:f3:16:f8:60:8c:68:e2:1b:a7:8e:3d:e3:84:74:1e:d2:
c6:b4:8d:9c:ec:77:75:44:be:f3:67:be:31:3e:49:cb:14:1e:
31:0f:54:66
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZjMZ2LohP1vs4eLHjv7IcZ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NTRiNjE4M2U0NTk3NDhjODllZTU0MzFiOGYzMWRlNjky
YWUzYjcwHhcNMjUwODIxMTEzMzA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODUxODA3ODIzOTA1OGE3NTYwZjc0ODhiYzRiM2FjYWUxMmUwNjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAnkVs5c7f3SzmdRIKSJi6WdYsO4
TPS1WcPsPE8jgatpUeEo/HLY+qQA/AhGk/32QspovXZV03r+EYbQrN3qRrubAHEl
3br8ouT6c/5UUGdw1EDvG8HS+Esp0jH/DeWXCSMrblXh3geJQnykpeL6Mdkm5BRJ
CH9y4aluIvb79BHp7tjzGhhYKzC20s8z6dsWNxvgmOJkt+J8gTmsYJz8PiJIAPP3
vFnTj39vngUCWoKeHbxZ1/tDGYwMMkCdwlNIu2YCiWDux7iRHMz0xisyobLnS8Bm
donx+vBGu9r1fAT6KQLO3AQ8HevuxDexCb27IVWz0nBXyotOrBVWxt9URQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFIhRgHgjkFinVg90iLxLOsrhLgaNMB8GA1UdIwQY
MBaAFFlUthg+RZdIyJ7lQxuPMd5pKuO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMt
ZDJhZGVlZDc1NWQ4LzEvaUZHQWVDT1FXS2RXRDNTSXZFczZ5dUV1Qm8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMtZDJhZGVlZDc1NWQ4
LzEvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQB1AsQMAwD
BALUCxQDBAHUCxgDBAPUCyADBAHUCyoDBAHUCzwwDQYJKoZIhvcNAQELBQADggEB
AGvelAHwURtKabWAX/dAlzGmV7A1r/a6z7e6Z0L6OB/3emkXZKKSYiHEcnUWGMW0
qr7Wd7fDynVH4HyTlMaokkQ8+p4sW6hBRj8Ff4UcMAOFeOShsYhA/OSAi+zNq+jo
SUkWhitQiknXmnPnfl7fLxIthdjsLLXFyCjJ7y+KsuQ2qlXZyGz21ZMlCgtuStVr
03OLhmsoUjLkdXcHPqWc3M45o8w8pQ2bBa7z7m6qTZE+QUU21bkC/kElECC1FQ+b
7Mu7ljO3mNq6335ZqqmxP63QeL+A4XmzL+ke8xb4YIxo4hunjj3jhHQe0sa0jZzs
d3VEvvNnvjE+ScsUHjEPVGY=
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:43:47 2025 by rpki-client